What is the cookie OWAPF used for from login.microsoft.com?

DileepaA 1

Our security scanner detected that the cookie OWAPF used for from login.microsoft.com does not have a secure or HttpOnly attribute set. Does anyone know what the cookie is used for or why it doesn't have the attributes set?

Thanks.

James Hamil 24,666 Reputation points Microsoft Employee

2020-11-26T00:52:23.79+00:00

Hi, do you still require assistance? If not, please mark the answer as verified.

Thank you,
James
Marilee Turscak-MSFT 36,846 Reputation points Microsoft Employee

2020-11-30T23:21:25.937+00:00

Can you validate that you saw it on login.mso.com? We should not actually have a cookie like that.
Marilee Turscak-MSFT 36,846 Reputation points Microsoft Employee

2020-12-16T17:56:48.43+00:00

Do you still need help with this?

1 answer

Marilee Turscak-MSFT 36,846 Reputation points Microsoft Employee

2020-11-02T21:53:55.017+00:00

It seems to be associated with outlook. Based on this post, it looks like it can be removed by cleaning your cookies. Have you tried that?

I have also reached out to the product team to as about this as I also have not encountered it personally.
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

What is the cookie OWAPF used for from login.microsoft.com?

1 answer

Your answer